Grepular

Self-hosted HTTP translation API (text and HTML) over Argos Translate; nothing leaves the box

Self-hostable ParseMail: upload a raw email, see its headers, parts and rendered previews

Hardened PowerDNS Authoritative Server: ~45 MB scratch image, Landlock + seccomp, signed

Headless-Chromium sidecar rendering hostile email HTML to PNG/PDF, for ParseMail

Hardened PowerDNS Recursor: ~37 MB scratch image, Landlock + seccomp, signed

Minimal full-featured Exim 4 on a scratch image, rebuilt daily from Debian Unstable

DEPRECATED - move away. haproxy-ingress plus lua5.3-maxminddb for GeoIP lookups from Lua

Minimal Radicale CalDAV/CardDAV server: single binary, no shell (amd64+arm64)

Small self-hosted OCI registry for 1-8 nodes; stays writable through partitions, needs no database

Country-based access control for reverse proxies (forwardAuth/ext_authz/auth_request)

Scoped credentials and policy for the PowerDNS API, e.g. ACME DNS-01 without the master key

Tiny (<600 KB) static sqlite3 binary, UPX-compressed, built from each release (amd64+arm64)

Apache's htpasswd alone in a ~1.4 MB scratch image, built from each new httpd release

Email Privacy Tester: TLS SNI watcher (FROM scratch, single binary)

SpamAssassin 4 spamd from Debian 13, with daily sa-update rule refreshes

Email Privacy Tester: PowerDNS query-log watcher

sivel's open source speedtest-cli as a single binary, no shell (amd64+arm64)